General
- Target 2026-09-26_51f49a167a483cd1fe2840f847100d72_amadey_coinminer_darkgate_elex_emotet_glassworm_icedid_remcos
- Size 10.2MB
- Sample260926-2vcppav1cw
- SHA256 8f8e820677b1f3580c1023af9bd35010fcf60ba0d9d1a8c5183a9c746dd8e93f
- MD5 51f49a167a483cd1fe2840f847100d72
- SHA1 a7f8c152e6d7cc4802d72907f694c537617cc814
- SHA512 6ba2c0dc6ab2496d1c8bf5cdb681f8ead1df74d4090bfe0f956164e4369e684ceedf1203c0958fb8f9719cada4e98cdf09f74996cc9379bbee78bfae382b8290
- SSDEEP 196608:z05JHEjQH3tm/kXam/kXV4rWf7hiXWjZP+l1FutuVAwNCmbIAGBya:djQH3tm/kXam/kXV487i1Fut4AwNCmJa
- TLSH T1EFB6F012F98180F2C8660170659B5B3DDF3A57180B25CDC7EBA8DCE9AD216E25B3E70D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-26_51f49a167a483cd1fe2840f847100d72_amadey_coinminer_darkgate_elex_emotet_glassworm_icedid_remcos.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-26_51f49a167a483cd1fe2840f847100d72_amadey_coinminer_darkgate_elex_emotet_glassworm_icedid_remcos
- Size 10.2MB
- SHA256 8f8e820677b1f3580c1023af9bd35010fcf60ba0d9d1a8c5183a9c746dd8e93f
- MD5 51f49a167a483cd1fe2840f847100d72
- SHA1 a7f8c152e6d7cc4802d72907f694c537617cc814
- SHA512 6ba2c0dc6ab2496d1c8bf5cdb681f8ead1df74d4090bfe0f956164e4369e684ceedf1203c0958fb8f9719cada4e98cdf09f74996cc9379bbee78bfae382b8290
- SSDEEP 196608:z05JHEjQH3tm/kXam/kXV4rWf7hiXWjZP+l1FutuVAwNCmbIAGBya:djQH3tm/kXam/kXV487i1Fut4AwNCmJa
- TLSH T1EFB6F012F98180F2C8660170659B5B3DDF3A57180B25CDC7EBA8DCE9AD216E25B3E70D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.